Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 May 2003 14:36:48 -0400
From:      "Allan Jude" <937863@primus.ca>
To:        <bv@wjv.com>
Cc:        freebsd-isp@freebsd.org
Subject:   RE: Network Statistics
Message-ID:  <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA4RatOouMvEOzXXL4aXw9/cKAAAAQAAAA1qkXqmGZXUGafOAKsj4NiwEAAAAA@primus.ca>
In-Reply-To: <20030514163152.GN59237@wjv.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
Sorry, it's not in the ports tree, it's here:
http://ipband.sourceforge.net/


-----Original Message-----
From: Bill Vermillion [mailto:bv@wjv.com] 
Sent: Wednesday, May 14, 2003 12:32 PM
To: Allan Jude
Subject: Re: Network Statistics


On Wed, May 14, 2003 at 11:46 , Allan Jude showing utter disregard 
for spell-checkers gave us this:

> Ipband

> It's in the ports tree, it is ment to email you whenever any of your
ips
> goes over a set limit (300kb/sec)
> You can change a bit of code to make it install firewall rules rather
> than email you


I can't see Ipband in the ports tree.  What hierarchy is it under?

Bill
> 
> -----Original Message-----
> From: owner-freebsd-isp@freebsd.org
> [mailto:owner-freebsd-isp@freebsd.org] On Behalf Of PsYxAkIaS
(FreeBSD)
> Sent: Wednesday, May 14, 2003 7:46 AM
> To: freebsd-isp@freebsd.org
> Subject: Network Statistics
> 
> 
> Hey all
> 
> I am currently using tcpstat to check if I am getting attacked,
tcpdump
> to trace the ips and what type of attack and ipfw firewall to block
> them. Sometimes trafshow too but on big attacks trafshow isnt helpful.
> 
> 1. Do you have any other utils than tcpdump to suggest ?
> 
> 2. I was thinking to make a script to auto-block (via ipfw firewall)
any
> ip that spends 300 kb/sec for more than 1 minute. Do you know any
tools
> that may show me which of my ips are getting more than 300 kb/sec? I
> hope you got my point
> 
> 
> Best Regards
> _______________________________________________
> freebsd-isp@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
> 
> _______________________________________________
> freebsd-isp@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"

-- 
Bill Vermillion - bv @ wjv . com



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA4RatOouMvEOzXXL4aXw9/cKAAAAQAAAA1qkXqmGZXUGafOAKsj4NiwEAAAAA>